ArShield
Launch app
VERIFY SEAL

Read a Quantum Seal without trusting the sender.

Drop a Seal PNG to read its unsigned fields and check its file hash. Everything happens in your browser: the file never leaves your device.

Drop a Quantum Seal PNG

Or click to choose a file. The Seal is read locally in your browser: nothing is uploaded.

HOW IT WORKS

Three checks, all local.

A Quantum Seal is a PNG that carries the facts about an envelope. Verification is reading those facts and confirming they hold.

1

Read the Seal

Open the PNG. Its unsigned metadata fields are plain to read: version, timestamp, algorithm, file hash, and any wallet, x402 or anchor reference.

2

Match the hash

Hash the .arshield envelope the Seal describes and compare it to the Seal’s file_hash. A mismatch means the file changed after it was sealed.

3

Confirm with the envelope

The Seal is unsigned, so it cannot prove anything on its own. Its file_hash is only useful once it matches a real envelope — decrypt that envelope to verify the ML-DSA-65 signature against the signer key.

FIELDS

What a Seal states.

Every field is unsigned metadata: it is a description of the envelope, not a claim the Seal proves on its own.

version
The Seal format version. It tells you which field set to expect when you read the rest.
timestamp
When the envelope was sealed, written at encrypt time on the device that made it.
algo
The hybrid algorithms the envelope used: ML-KEM-768 + X25519 for the KEM, ML-DSA-65 for the signature.
file_hash
SHA-256 of the .arshield envelope this Seal belongs to. Match it against the envelope to confirm nothing changed.
wallet
Present when a wallet signed the envelope. It names the address the signature recovers to.
x402
Present when the envelope carries an x402 receipt, so a payment and its payload stay bound together.
anchor
Present when the Seal has been anchored: a durable, tamper-evident reference to the sealed record.

The Seal itself is unsigned. Its value comes from what it lets you check: the file_hash against the envelope, and the wallet against the signature. Anchoring adds a durable reference so the record can be checked again later.